$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa File: bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa (raw, json) Hash identifier: GPc6YvLEevXfXy5kwBo3LRUTmMZUEA9slJlxvbkonJI= Subject key identifier: 97:DD:55:67:3E:A3:0D:66:81:08:4C:CE:58:32:C3:B4:6E:84:55:96 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965E41C0F6F555F42A0A80 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397226 IP address blocks: 156.154.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5e:41:c0:f6:f5:55:f4:2a:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=23c27c5e-9853-4dc5-8094-f0fd7a162af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:d8:8c:c7:e7:42:67:b9:99:04:a5:62:63: 0f:6e:a7:b6:f3:5b:d6:b2:e3:b9:8d:2b:bb:ac:ed: dc:6f:11:c4:f4:2b:17:49:54:b2:e8:f3:d5:09:b6: d8:46:5a:0b:f6:b4:84:6b:56:c5:d2:4d:53:9b:a9: d6:d6:16:5d:42:34:44:44:82:70:f5:2d:cd:2e:59: 76:5a:16:04:82:c4:29:02:e4:39:ea:81:fa:5d:d1: ee:12:b3:39:db:97:4a:e1:1c:01:15:1d:3c:f7:dc: 67:d1:4c:98:ce:a4:47:c6:7b:0c:1e:16:df:7d:ef: d7:a2:f5:b4:b0:6f:17:7f:5c:de:ac:4a:21:ae:04: 43:d3:71:1b:af:01:5b:85:d9:74:c9:29:98:13:f5: 35:27:a7:23:e7:bc:63:99:57:29:0c:8f:00:c9:02: 8d:2b:34:bf:3b:d4:77:0c:f0:9a:1a:80:6e:5b:13: 6d:bd:0a:bc:6f:de:0a:3b:cf:00:a4:76:e3:0f:14: 31:26:ab:26:ca:7b:4c:4d:a9:79:c8:01:3e:a5:b8: 5b:2c:aa:d8:89:f4:9a:03:24:25:e4:51:ff:83:34: 50:c2:95:67:11:88:90:43:79:2f:c0:49:cf:d9:56: 77:76:2f:0d:e0:82:ab:1b:c6:69:d4:a3:b7:db:30: 14:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DD:55:67:3E:A3:0D:66:81:08:4C:CE:58:32:C3:B4:6E:84:55:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bf1f8c51-5f9e-36cc-9880-4bcd569ad319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:79:1b:0c:5d:ee:11:f3:96:bd:31:83:79:ea:17:39:20:48: 31:3b:c9:28:05:13:84:ec:0c:36:90:7f:28:8c:5d:55:6d:f6: 54:4a:a8:cc:b2:31:93:f2:51:bb:68:91:ff:ef:f0:a0:f0:b8: 1f:c6:00:b8:29:52:83:cf:65:9d:27:d5:22:76:13:b4:43:12: 2c:bf:29:eb:d9:43:f1:01:14:3c:db:77:ba:67:d2:e1:84:36: 4a:4c:63:4b:ea:69:3b:12:9d:16:86:d5:4d:2f:0a:91:ac:81: 46:71:1d:87:fa:e9:56:b5:4d:b6:d7:9f:27:d2:5a:f0:80:97: 8b:f2:a8:07:93:59:e6:d5:14:77:91:a2:86:da:72:32:21:aa: 7a:43:16:c0:32:20:48:66:6a:1d:77:56:a9:45:9b:df:9f:03: ae:e9:71:e3:bf:07:e2:a7:f8:00:e4:4a:c1:40:26:66:23:2c: 94:9d:68:c6:72:10:94:34:cd:c2:39:40:ff:1d:a1:91:28:d3: bc:ce:a9:f5:7c:08:76:00:43:12:40:fd:11:6b:e5:38:c0:58: a6:a1:2f:1b:22:91:93:9e:ff:21:5d:f2:ac:c5:0f:ca:3d:31: 24:ed:9b:d6:13:18:a1:97:d0:a4:51:93:5d:9e:7d:6e:c3:b3: b4:6f:28:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll5BwPb1VfQqCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjNjMjdjNWUtOTg1My00ZGM1LTgwOTQtZjBmZDdhMTYyYWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+rYjMfnQme5mQSlYmMPbqe281vWsuO5jSu7 rO3cbxHE9CsXSVSy6PPVCbbYRloL9rSEa1bF0k1Tm6nW1hZdQjRERIJw9S3NLll2 WhYEgsQpAuQ56oH6XdHuErM525dK4RwBFR0899xn0UyYzqRHxnsMHhbffe/XovW0 sG8Xf1zerEohrgRD03EbrwFbhdl0ySmYE/U1J6cj57xjmVcpDI8AyQKNKzS/O9R3 DPCaGoBuWxNtvQq8b94KO88ApHbjDxQxJqsmyntMTal5yAE+pbhbLKrYifSaAyQl 5FH/gzRQwpVnEYiQQ3kvwEnP2VZ3di8N4IKrG8Zp1KO32zAUTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfdVWc+ow1mgQhMzlgyw7RuhFWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYmYxZjhjNTEtNWY5ZS0z NmNjLTk4ODAtNGJjZDU2OWFkMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp5Gwxd7hHzlr0xg3nqFzkgSDE7ySgFE4TsDDaQfyiMXVVt9lRKqMyy MZPyUbtokf/v8KDwuB/GALgpUoPPZZ0n1SJ2E7RDEiy/KevZQ/EBFDzbd7pn0uGE NkpMY0vqaTsSnRaG1U0vCpGsgUZxHYf66Va1TbbXnyfSWvCAl4vyqAeTWebVFHeR oobacjIhqnpDFsAyIEhmah13VqlFm9+fA67pceO/B+Kn+ADkSsFAJmYjLJSdaMZy EJQ0zcI5QP8doZEo07zOqfV8CHYAQxJA/RFr5TjAWKahLxsikZOe/yFd8qzFD8o9 MSTtm9YTGKGX0KRRk12efW7Ds7RvKBU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:48:01 2025 by rpki-client